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Abstract. Kripke Structures and Labelled Transition Systems are the 
two most prominent semantic models used in concurrency theory. Both 
models are commonly believed to be equi-expressive. One can find many 
ad-hoc embeddings of one of these models into the other. We build upon 
the seminal work of De Nicola and Vaandrager that firmly established 
the correspondence between stuttering equivalence in Kripke Structures 
and divergence-sensitive branching bisimulation in Labelled Transition 
Systems. We show that their embeddings can also be used for a range 
of other equivalences of interest, such as strong bisimilarity, simulation 
equivalence, and trace equivalence. Furthermore, we extend the results by 
De Nicola and Vaandrager by showing that there are additional trans- 
lations that allow one to use minimisation techniques in one semantic 
domain to obtain minimal representatives in the other semantic domain 
for these equivalences. 



1 Introduction 

Concurrency theory, and process theory in general, deal with the analysis and 
specification of behaviours of reactive systems, i.e., systems that continuously in- 
teract with their environment. Over the course of the past decades, a rich variety 
of formal languages have been proposed for modelling such systems effectively. 
At the level of the semantics, however, consensus seems to have been reached 
over the models used to represent these behaviours. Two of the most pervasive 
models are the state-based model generally referred to as Kripke Structures and 
the event-based model known as Labelled Transition Systems, henceforth referred 
to as KS and LTS. 

The common consensus is that both the KS and LTS models are on equal 
footing. This is supported by several embeddings of one model into the other 
that have been studied in the past, see below for a brief overview of the rele- 
vant literature. As far as we have been able to trace, in all cases embeddings of 
both semantic models were considered modulo a single behavioural equivalence. 
For instance, in their seminal work [8], De Nicola and Vaandrager showed that 
there are embeddings in both directions showing that stuttering equivalence [1] 
in KS coincides with divergence-sensitive branching bisimulation [4] in LTS. The 



cmbcddings, however, look a bit awkward from the viewpoint of concrete equiv- 
alence relations. 

On the basis of these results, one cannot arrive at the conclusion that the 
embeddings also work for a larger set of equivalences. For instance, it is very 
easy to come up with a mapping that reflects and preserves branching-time 
equivalences while breaking linear-time equivalences, by exposing observations 
of branching through the encodings. Note that it is equally easy to construct 
encodings that break branching-time equivalences while reflecting and preserving 
some linear-time equivalences, e.g., by including some form of determinisation 
in the embeddings. 

Our contributions are as follows. Using the KS-LTS embeddings Its and ks of 
De Nicola and Vaandrager in [7] , in Section 3 we formally establish the following 
relations under these embeddings: 

1. bisimilarity in KS reflects and preserves bisimilarity in LTS; 

2. similarity in KS reflects and preserves similarity in LTS; 

3. trace equivalence in KS reflects and preserves completed trace equivalence 
in LTS. 

These results add to the credibility that indeed both worlds are on equal footing, 
and it may well be that the embeddings ks and Its are in fact canonical. 

As already noted in [7], there is no immediate correspondence between the 
embeddings Its and ks. For instance, one cannot move between KS and LTS and 
back again by composing Its and ks. We mend this situation by introducing two 
additional translations, viz., Its 1 and ks -1 , that can be used to this end. More- 
over, we show that combining these with the original embeddings enables one 
to minimise with respect to an equivalence in KS by minimising the embedded 
artefact in LTS (and vice versa). 

From a practical point of view, our contributions allow one to smoothly move 
between both semantic models using a single set of translations. This reduces 
the need for implementing dedicated software in one setting when one can take 
advantage of state-of-the-art machinery available in the other setting. 

Related Work In their seminal paper (see [8]) on logics for branching bisimilarity, 
De Nicola and Vaandrager established, among others, a firm correspondence be- 
tween the divergence-sensitive branching bisimilarity of [4] , and stuttering equiv- 
alence [1]. Their results spawned an interest in the relation between temporal 
logics in the LTS and the KS setting, see e.g. [6,7]. The latter both contain the 
embeddings that we use in this paper, differing slightly from the ones proposed 
in [8], which in turn were in part inspired by the (unpublished) embedding by 
Emerson and Lei [2]. The tight correspondence between stuttering equivalence 
and branching bisimilarity that was exposed, led Groote and Vaandrager to de- 
fine algorithms for deciding said equivalences in [5] . Their algorithms (and their 
correctness proofs), however, are stated directly in terms of the appropriate set- 
ting, and do not appear to use the embeddings Its and ks (but they might have 
acted as a source of inspiration) . 
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Apart from the few documented cases listed above, many ad-hoc embed- 
dings are known to work for equivalences that are not sensitive to abstraction. 
For instance, one can model the state labelling in a Kripke Structure by means 
of labelled self-loops, or directly on the edges to the next states, thereby ex- 
posing the same information. Such embeddings, however, fail for equivalences 
that are sensitive to abstraction, such as stuttering equivalence, which basically 
compresses sequences of states labelled with the same state information. 

Outline In Section 2, we formally introduce the computational models KS and 
LTS, along with the embeddings ks and Its. The latter are proved to preserve 
and reflect the additional three pairs of equivalences relations stated above. In 
Section 4, we introduce the inverses ks -1 and Its 1 , and we show that these can 
be combined with ks and Its, respectively, to obtain our minimisation results. 
We finish with a brief summary of our contributions and an outlook to some 
interesting open issues. 

2 Preliminaries 

Central in both models of computation that we consider, i.e., KS and LTS, are 
the notions of states and transitions. While the KS model emphasises the infor- 
mation contained in such states, the LTS model emphasises the state changes 
through some action modelling a real-life event. Let us first recall both models 
of computation. 

Definition 1. A Kripke Structure is a structure (S,AP,-^,L), where 

— S is a set of states; 

— AP is a set of atomic propositions; 

>C S x S is a total transition relation, i.e., for all s 6 S, there exists t 6 S, 

such that (s,t) G— >; 

— L : S — > 2 is a state labelling. 

By convention, we write s — > t whenever (s,t) G— h 

Remark 1. The transition relation in the KS model is traditionally required to be 
total. Our results do not depend on the requirement of totality, but we choose to 
enforce totality in favour of a smoother presentation and more concise definitions. 
Without totality, slightly more complicated treatments of the notions of paths 
and traces (see also Section 3.4) are needed. 

With the above restriction in mind, we define the LTS model with a similar 
restriction imposed on it. 

Definition 2 (Labelled Transition System). A structure (S,Act,—>) is an 
LTS, where: 

— S is a set of states; 
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- Act is a set of actions; 

>E S x (Act U {t}) x S is a total transition relation, i.e., for all s E S, there 

are a E Act, t E S, such that (s, a, t) e— K 

In lieu of the convention for KS, we write s t whenever (s, a, t) e— K 

Note that in the setting of the LTS model, a special constant r is assumed 

outside the alphabet of the set of actions Act of any concrete transition system. 

This constant is used to represent so-called silent steps in the transition system, 

modelling events that are unobservable to any witness of the system. 

In [7], De Nicola and Vaandrager considered embeddings called Its and ks, 

which allowed one to move from KS models to LTS models, and, vice versa, from 

LTS models to KS models. We repeat these embeddings below, starting with the 

embedding from KS into LTS. 

Definition 3. The embedding Its : KS — > LTS is defined as \ts(K) = ( 5", Act, — > ) 
for arbitrary Kripke Structures K = (S, AP, — > , L ), where: 

— S' = S U {s | s E S}, where it is assumed that s £ S for all s e S; 

- Act = 2 AP U {J_}; 

— — > is the smallest relation satisfying: 

s ->■ t L(s) = L(t) 



s — > t 
s -> t L(s) ^ L(t) 



- L(s) L(t) 
s > s s > t 

The fresh symbol _L is used to signal a forthcoming encoding of the state infor- 
mation of the Kripke Structure. Encoding the state information by means of a 

L(s) 

self-loop s ► s introduces problems in preserving and reflecting equivalences 

that are sensitive to abstraction. 

Definition 4. The embedding ks : LTS — > KS is formally defined as ks(T) = 
( <S", AP, — y , L ) for Labelled Transition System T = (S, Act, — > ), where: 

- S' = SU{(s,a,t) E-> | a^r}; 

- AP = Act U {_L}, where _L £ Act; 
> is the least relation satisfying: 



s—t(s,a,t) (s,a,t)—tt s—tt 

— L(s) = {±} for s E S, and L((s,a,t)) = {a}. 

In this embedding the fresh symbol _L is used to label the states from the Labelled 
Transition System. The reason to treat r-transitions different from ordinary ac- 
tions is that otherwise equivalences that abstract from sequences of r-transitions 
are not reflected well. 
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Observe that, as already stated in [7], due to the artefacts introduced by the 
cmbcddings, moving from LTS to KS and back again yields transition systems 
incomparable to the original ones. Consequently, in LTS, one cannot take ad- 
vantage of tools for minimising in the setting of KS, and vice versa. We defer 
further discussions on this matter to Section 4. 

3 Preservations and Reflections of Equivalences Under Its 
and ks 

The embeddings Its and ks have already been shown to preserve and reflect 
stuttering equivalence [1] and divergence-sensitive branching bisimulation [4] by 
De Nicola and Vaandrager. In this section, we introduce three additional pairs of 
equivalences and show that these are also preserved by the embeddings Its and 
ks. Our choice for these four equivalences is motivated largely by the limited set 
of equivalence's available in the KS model (contrary to the LTS model, which 
offers a very fine-grained lattice of equivalence relations). 

Remark 2. For reasons of brevity, throughout this paper we define equivalence 
relations on states within a single LTS (resp. KS) rather than equivalence rela- 
tions between different models in LTS (rcsp. KS). Note that this does not incur 
a loss in generality, as it is easy to define the latter in terms of the former. 

3.1 Similarity 

Both KS and LTS have well-developed theories revolving around similarity. We 
first formally define both notions. 

Definition 5. Let K = (S,AP,^-,L) be a Kripke Structure. A relation B C 
S x S is a simulation relation iff for every s, s' E S satisfying (s, s') E B: 

- L(s) = L(s'); 

— for all t G S, if s — > t, then s' — > t' for some t' G S such that (t, t 1 ) E B. 

For states s, s' E S, we say s is simulated by s' if there is a simulation relation B, 
such that (s, s') E B. States s,s' E S are said to be similar, denoted K \= s ~ s' 
iff there are simulation relations B and B' , such that (s, s') E B and (s', s) E B' . 

Remark 3. It should be noted that when lifting our notion of similarity to an 
equivalence relation between different models in KS, the first requirement is 
sometimes stated as L(s) = L'(s') n AP, where V is the state labelling of the 
second KS model, and AP is the set of atomic propositions of the first KS model. 
In this case, some form of abstraction is included already, and care should be 
taken to deal with such abstractions properly when lifting all our results to such 
a setting. 

Definition 6. LetT = (S,Act,—t) be a Labelled Transition System. A relation 
B C S x S is a simulation relation iff for every s, s' E S satisfying (s, s') E B: 
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— for all t G S and a G Act U {t}, if s t, then s' —> t' for some t' G S' such 
that (t,f) G B. 

State s E S is said to be simulated by state s' G S if there is a simulation relation 
B, such that {s,s') G B. States s,s' G S are similar, denoted T \= s ~ s' iff 
there are simulation relations B and B' , such that {s,s') G B and (s' , s) G B' . 

The theorems below state that indeed, embedding Its preserves and reflects 
KS-similarity through LTS-similarity (see Theorem 1), and vice versa, embedding 
ks preserves and reflects LTS-similarity through KS-similarity (Theorem 2). 

Theorem 1. Let K = (S,AP,^,L) be an arbitrary Kripke Structure. Then, 
for all s, s' G S, we have K \= s ~ s' iff \ts(K) \= s ~ s' . 

Proof. See Appendix A.l. □ 

Theorem 2. Let T = (S, Act, — > ) be a Labelled Transition System. Then for 
all s, s' G S, we have T \= s ~ s' iff ks(T) |= s ~ s' . 

Proof. See Appendix A. 2. □ 



3.2 Bisimilarity 

A slightly stronger notion of equivalence that is rooted in the same concepts as 
similarity, is bisimilarity. Again, bisimilarity has been defined in both KS and 
LTS, and we here show that both definitions agree through the embeddings Its 
and ks. 

Definition 7. Let K = (S,AP,^,L) be a Kripke Structure. States s,s' G S 
are said to be bisimilar, denoted K \= s±±s' iff there is a symmetric simulation 
relation B, such that {s,s') G B. 

Similarly, we define bisimilarity in the setting of LTS as follows: 

Definition 8. Let T = (S, Act, — > ) be a Labelled Transition System. States 
s,s' G S are bisimilar, written T \= s±±s' iff there is a symmetric simulation 
relation B, such that (s,s r ) G B. 

Theorem 3. Let K = (S, AP, — L ) be a Kripke Structure. Then for all s, s' G 
S, we have K \= s±±s' iff \ts(K ) |= s±±s' . 

Proof. The proof is along the lines of the proof for similarity. For details, see 
Appendix A.3. □ 

Theorem 4. Let T = (S, Act, ^ } be a Labelled Transition System. For all 
s, s' G S, we have T \= s±±s' iff ks(T) |= s±±s' . 

Proof. Again, the proof is along the lines of the proof for similarity. □ 
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3.3 Stuttering Equivalence Divergence-Sensitive Branching 
Bisimilarity 

In this section, we merely repeat the definitions for stuttering equivalence and 
divergence-sensitive branching bisimilarity. In Section 4, we come back to these 
equivalence relations and state several new results for these. 

The following definition for stuttering equivalence is taken from [8] , where it 
is shown to coincide with the original definition by Brown, Clarke and Grum- 
berg [1]. We prefer the former phrasing because of its coinductive nature. 

Definition 9. Let K = (S, AP, — >•, L ) be a Kripke Structure. A symmetric rela- 
tion B C 5 x S is a divergence-blind stuttering equivalence iff for all (s, s') G B: 

— L{s) = L(s'); 

— for all t G S, if s — >• t, then there exist s' Q , . . . , s' n G S, such that s' = s' Q and 
(t, s' n ) G B, and for all i < n, — > s' i+1 and (s, s'A G B. 

Definition 10. Let K = (S, AP, — >•, L ) be a Kripke Structure. Let the Kripke 
Structure Kd = (Sd, APd, — Ld ) be defined as follows: 

— Sd = S I) {sd} for some fresh state Sd £ S; 

— APd = AP U {d} for some fresh proposition d £ AP; 

— — >d=^ U{(s,Sd) | s is on an infinite path of states labelled L(s), or s = Sd}; 

— for all s G S, Ld(s) = L(s), and Ld(sd) — {d}. 

States s,s' G S are said to be stuttering equivalent, notation: K (= s ~ s s' iff 
there is a divergence-blind stuttering equivalence relation B on Sd of Kd, such 
that (s,s') G B. 

The origins of divergence-sensitive branching bisimilarity can be traced back 
to [4] . In [9] , Van Glabbeek et al demonstrate that various incomparable phras- 
ings of the divergence property all coincide with the original definition. For our 
purposes the following formulation is most suitable. 

Definition 11. Let T = (S,Act,^) be a Labelled Transition System. A sym- 
metric relation B C SxS' is a divergence-sensitive branching simulation relation 
iff for all (s,s') G B: 

— if there is an infinite sequence of states so si S2 • • • such that s = sq and 
Si — > Sj+i for all i, then there exist a mapping a : N — > N, and an infinite 
sequence of states s' s[ s' 2 ■ ■ ■ such that s' = s' , s' k ^> s' fc+1 and (s CT (fe) , s' k ) G 
B for all k G N; 

— for all t G S and a G Act U {t}, if s — > t, then a — t and (t, s') G B, or 
s' ^ s* A t' for some s*,t' G S such that (s,s*) G B and (t,t') G B. 

States s, s' G S are divergence-sensitive branching bisimilar, notation s^^s' iff 
there is a symmetric divergence-sensitive branching simulation relation B, such 
that (s,s') G B. 
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3.4 Trace Equivalence Completed Trace Equivalence 



Trace equivalence and completed trace equivalence are the only linear-time 
equivalence relations that we consider in this paper. In defining these equiv- 
alence relations, we require some auxiliary notions, basically defining what a 
computation is in our respective models of computation. 

Definition 12. Let K — (S, AP, — L) be a Kripke Structure. A path starting 
in state s E S is an infinite sequence s si . . ., such that Si — > s i+ i for all i, 
and s = s - The set of all paths starting in s is denoted Paths(s). 

Basically, a path formalises how a single computation evolves in time. Actually, 
it is the information contained in the states that are visited along such a com- 
putation that is often of interest, as it shows how the state information evolves 
in time. This is exactly captured by the notion of a trace. 

Definition 13. Let K = (S, AP, — >, L) be a Kripke Structure. Let ir = so si ... 
be a path starting in so- The trace of-ir, denoted Trace(7r), is the infinite sequence 
L(s ) L(si) For a set of paths LI, we set 



States s,s' E S are trace equivalent, denoted K |= s ~ t s' , i/Traces(Paths(s)) = 
Traces(Paths(s')). 

Remark 4- In the presence of non-totality of the transition relation of a Kripke 
Structure, it no longer suffices to consider only the infinite paths as the basis 
for defining trace equivalence. Instead, maximal paths are considered, which in 
addition to the infinite paths, also contains paths made up of sequences of states 
that end in a sink-state, i.e., a state without outgoing edges. 

For models in LTS, we define similar-spirited concepts; for the origins of the 
definition, we refer to Van Glabbeek's lattice of equivalences [3]. 

Definition 14. Let T = (S, Act, — >• ) be a Labelled Transition System. A run 
starting in a state s E S is an infinite, alternating sequence of states and actions 
s flo s i fl i • • • satisfying Si s i+ i for all i, and s = s . The set of all runs 
starting in so is denoted Runs(s ). 

Definition 15. Let T = (S, Act, —>} be a Labelled Transition System. The trace 
of a run p = s ao Si ai • • •, denoted Trace(p), is the infinite sequence a ai 
For a set of runs R, we define 



States s,s' E S are completed trace equivalent, denoted by T |= s ~ t s' iff 
Traces(Runs(s)) = Traces(Runs(s')). 

Theorem 5. Let K = (S,AP,^,L) be a Kripke Structure. For all s,s' E S, 
we have K |= s ~ t s' iff Its(i^T) |= s ~ t s' . 



Traces(iT) = {Trace(7r) | ir E LI} 



Traces(i?) = {Trace(p) | p E R} 
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Proof. See Appendix A. 3 for details. 



□ 



In a similar vein, we obtain that completed trace equivalence in LTS is preserved 
and reflected by trace equivalence in KS. 

Theorem 6. Let T = (S, Act, — » ) be a Labelled Transition System. Let s,s' E S 
be arbitrary states. We have T |= s ~ t s' iff ks(T) |= s ~ t s ' ■ 

Proof. Along the lines of the proof for Theorem 5. □ 
4 Minimisations in LTS and KS 

As we concluded in Section 2, the mappings Its and ks cannot be used to freely 
move to and fro the computational models. Instead, we introduce two additional 
mappings, viz., Its 1 and ks -1 that act as inverses to Its and ks, respectively, and 
we show that these can be used to come to our results for minimisation. Here, 
we focus on the computationally most attractive equivalences, viz., bisimilarity 
and stuttering equivalence. 

Let ~ G {±±, ~ s } an d <H> G {±±, ±±dsb} be arbitrary equivalence relations 
on KS and LTS, respectively. For a given model K in KS, its quotient with 
respect to ~ is denoted K/^. Similarly, for a given model T in LTS, its quotient 
with respect to <H> is denoted T/ . We assume unique functions ^-mhiKS for 
KS, and o-mini_TS for LTS that uniquely determine transition systems that are 
isomorphic to the quotient. If, from the equivalence relation ~, the setting is 
clear, we drop the subscripts and write ~-min instead. 

4.1 Minimisation in KS via minimisation in LTS 

We first characterise a subset of models of LTS for which we can define our 
inverse Its -1 of Its. 

Definition 16. Let T = (S, Act, — > ) be a Labelled Transition System. Then T 
is reversible iff 

1. Act = 2 AP U {_L} 7 for some set AP ; 

2. for all s,s' G S and a G Act U {r} ; if s A s' , then s' 

3. for all s, s' , s" G S such that s ^> s' and s ^> s" , we require that s' A and 
s" implies a = a' for all actions a, a' G Act. 

Note that any embedding \ts(K) of a Kripke Structure K is a reversible Labelled 
Transition System. Reversibility is preserved by the quotients for ±± and ±±dsb> 
as stated by the following proposition. 

Proposition 1. Let T be an arbitrary reversible Labelled Transition System. 
Then T/^, for <H> 6 {±±, ±±<jsb}; * s reversible. □ 

The embedding Its introduces a fresh, a priori known action label _!_. We treat 
this constant differently from all other actions in our reverse embedding. 
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Definition 17. Let T = (S, Act, — > } be a reversible Labelled Transition System. 
We define the Kripke Structure lts _1 (T) as the structure { S' , AP, — y, L), where: 

- S' = {s e S | s -4}; 

- AP is such that Act = 2 AP U {_L}; 

- — > is the least relation satisfying the single rule: 

a , , , X 

s — > s a 7^ _L s — > 



s — > s 

— L(s) = a for the unique a such that si>s'-4. 

The following proposition establishes that Its -1 is the inverse of embedding Its. 

Proposition 2. We have Its 1 o Its = Id. □ 

Proof. Establishing the isomorphism follows immediately from the definitions 
and the observation that \ts(K) is reversible. See Appendix B.l. □ 

Note that reversibility of a Labelled Transition System T is too weak to 
obtain (Its o lts _1 )(T) = T, as the following example illustrates: 

Example 1. Consider the Labelled Transition System left below. 

Its 1 Its 

±c±o^{a} * {a}0^3 ► TdaZX) 

{a} 

Clearly, the Labelled Transition System is reversible, so the mapping Its -1 is 
applicable. Its result is given by the Kripke Structure in the middle. Applying 
Its to the middle Kripke Structure yields the Labelled Transition System at 
the right. It is clear that the latter is not isomorphic to the original Labelled 
Transition System. □ 

Lemma 1. We have ±±-minLTS ° Its o ±±-minKs = Its o o-mmKs- 

Proof. See Appendix B.2. □ 

Lemma 2. We have j±d s \,-mini_TS ° Its o ss s -minKs = Its o ss s -miuKS- 

Proof. See Appendix B.3. □ 

Before we present the main theorems concerning the minimisations in KS through 
minimisations in LTS, we first show that it suffices to prove such results for 
Kripke Structures that are already minimal; see the lemma below. 

Lemma 3. Let ~ e {±±, « s } and «-> e {±±,±± dsb } such that Its preserves 
reflects ~ through Then 

r^-min = Its 1 o o-fflin o Its o ^-min 

implies 

^-min = Its 1 o o-mtn o Its 
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Proof. Assume that we have 

~-min = Its 1 o o-min o Its o ^-min (*) 

By definition of ^-min, we find \/K : ^-min(K) ~ K. Since, by assumption, 
Its preserves and reflects ~ through we derive MK : \Xs{K) <H> lts(~-min(iif )). 
By definition of o-min, this means that we have: 

O-min o Its = O-min o Its o ^-min 
As Its 1 is functional, and o-min preserves reversibility, we immediately obtain: 
Its 1 o o-min o Its = Its 1 o o-min o Its o ^-min (**) 
The desired conclusion then follows by combining * and **. □ 
We finally state the two main theorems in this section. 
Theorem 7. We have ±±-min K s = Its 1 o ±±-min LT s ° Its. 
Proof. Lemma 1 guarantees 

■H-mim ts o Its o o-minKS = Its o j^-minKS 
Functionality of Its -1 , combined with Proposition 1, we find: 

Its -1 o o-minLTS ° hs o o-minKS = Its -1 o Its o <H>-minKS 
By Lemma 3, we then have our desired conclusion: 

O-minKS = Its -1 o o-minLTS Its 

□ 

Theorem 8. We have « s -mitiKS = Its -1 o ±± dsh -miriLTS ° Its. 

Proof. Similar to Theorem 7, using Lemma 2 instead of Lemma 1. □ 

4.2 Minimisation in LTS via minimisation in KS 

In the previous section, we showed that one can minimise in KS with respect 
to bisimilarity or stuttering equivalence, using the embedding Its, a matching 
equivalence relation in LTS and converting to KS again. In a similar vein, we 
propose a reverse translation for ks, which allows one to return to LTS from KS. 
We first characterise a set of Kripke Structures that are amenable to translating 
to Labelled Transition Systems. 

Definition 18. Let K = ( 5, AP, — >•, L ) be a Kripke Structure. Then K is re- 
versible iff 

1. AP = Act U {_L} for some set Act; 
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2. \L(s)\ = 1 for all s G S; 

3. for all s for which _L we require that for all s', s" , s — > s' and s — > s" 
implies both s' = s" and L(s') = {_!_}. 

Proposition 3. Let K be an arbitrary reversible Kripke Structure. Then K/^, 
for ^6 {±±, ss s }, is reversible. 

Definition 19. Let K = (S,AP,^-,L) be a reversible Kripke Structure. The 
Labelled Transition System ks _1 (.ff) is the structure ( S', Act, — > ), where: 

- S' = {s G S | L(s) = {±}}; 

- Act is suc/i that Act = AP \ {_L}; 
> is the least relation satisfying: 

s^s 1 L(s) = L(s') s^s" «a(s")\{i} s"^s' 



s -> s' s -> s' 

Proposition 4. We have ks _1 o ks = Id. 

Proof. Similar to the proof of Proposition 2. □ 
Without further elaboration, we state the final results. 

Theorem 9. We have ±±-miniTS = ks -1 o ±±-minKS ° ks. □ 
Theorem 10. We have ±± dsh -minLTS = ks -1 o w s -minus ks. □ 



5 Conclusions 



Our results in Section 3 naturally extend the fundamental results obtained by 
De Nicola and Vaandrager in [7, 8] . In a sense, we can now state that their em- 
beddings ks and Its are canonical for four commonly used equivalence relations. 

While the stated embeddings have traditionally been used to come to results 
about the correspondence between logics, the question whether they support 
minimisation modulo behavioural equivalences was never answered. Thus, in 
addition to the above stated results, we proved that indeed the embeddings 
ks and Its can serve as basic tools in the problem of minimising modulo a be- 
havioural equivalence relation. To this end, we defined inverses of the embeddings 
to compensate for the fact that composing ks and Its docs not lead to transition 
systems that are comparable (in whatever sense) to the one before applying the 
embeddings. The latter results are clearly interesting from a practical perspec- 
tive, allowing one to take full advantage of state-of-the-art minimisation tools 
available for one computational model, when minimising in the other. 

Our minimisation results are for two of the most commonly used equivalence 
relations that are, arguably, still efficiently computable. However, we do intend 
to extend our results also in the direction of (completed) trace equivalence and 
similarity. As a slightly more esoteric research topic, one could look for improving 
on the embedding Its, as, compared to the embedding ks, it introduces more 
"noise" . For instance, it yields Labelled Transition Systems that have runs that 
cannot sensibly be related to paths in the original Kripke Structure. 
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A Proofs for Section 3 
A.l Proof of Theorem 1 

Consider states s and s' in a Kripke structure ( S, A, — >, L) ). Assume that K \= 
s ~ s' and that this is witnessed by the simulation relations B and C with 
(s, s') G B and (s', s) G C. We show that, with respect to the Labelled Transition 
System associated with the Kripke structure, the relation B' = B U {(s, s') 
(s, s') G B} is a simulation relation with (s, s') G B. In a similar way a simulation 
relation C" with (s', s) G C" can be defined. This part is omitted. 

First consider an arbitrary pair (s, s') G S'. This is due to the fact that 

(s, s') G B. By construction the only transitions for s and s' are s >• s and 

-/ £00^ g / From the fact that e B it follows that L(s) = L(s'). This 

suffices to satisfy all transfer conditions for the pair (s, s'). 

Next, consider an arbitrary pair (s,s') G B' . This is due to the fact that 
(s, s') G B. Let us consider all transitions from s. 

— s s. Since s' G S we have s' ^> s'. Since (s,s') G B it also follows that 
(s,s') G £?'. 

— s A t for some t G S* such that s — > t and i(s) = L{t). Since (s, s') G B and 
B is a simulation, it follows that L(s) = L(s') and s' — > t' for some t' £ S 
such that G B. Since (i,t') G B we have = an d therefore 
L(s') = L(t') as well. Thus, by construction s' A t'. From (t,t') G i? we 
obtain G B' . 

— s t for some t G 5 such that s — > t and L(s) ^ Since (s, s') G -B 
and B is a simulation, it follows that L(s) — L(s') and s' — > t' for some t 1 G S 
such that G B. Since (t,t') E B we have L(£) = and therefore 

L(s') ^ L(t') as well. Thus, by construction s' \ t' . From (t,t') G B we 
obtain G B'. □ 

A.2 Proof of Theorem 2 

Consider states s and s' in a Labelled Transition System T — (S, A, — >). As- 
sume that T \= s ~ s' and that this is witnessed by the simulations B and 
C with (s,s') G B and (s',s) G C. We show that, with respect to the Kripke 
structure associated with the Labelled Transition System, the relation B 1 = 
B U {((s, a, t), (s', a, i')) I («, a, t), (s', a, t') G S' A (s, s'), (t, t') G B} is a simula- 
tion relation with (s, s') G i?. Here S' is the set of states of that Kripke structure 
as prescribed by Definition 4. Similarly, a simulation relation C with (s', s) G C 
can be defined. 

First consider a pair (s, s') that is present in B' due to its presence in B. 
Since s,s' E S we have by definition that L(s) = {±} = L(s'). We consider all 
possible transitions from s. By construction the only possible transitions for s 
are the following. 
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— s — > t for some t G S such that s A t. Since (s, s') G -B and B is a 
simulation relation, we have s' A t' for some t' G S such that {s',t') G £>. 
By construction then also s' — > t' and (s',t') G £?'. 

— s — > (s,a,t) for some a <E A and t E S such that a ^ t and s A i. Since 
(s, s') G £? and B is a simulation relation, we have s' —> t' for some t' £ S 
such that G B. By construction then also s 1 — > (s',a,t'). Note that 
((s, a, t), (s', a, t')) e B' since (s, s') G S and (i, t') G S. 

Next, consider a pair ((s, a, t), (s', a, t')) that is present in B' due to presence 
of both (s,s') and in B. By construction L((s,a,t)) = {a} = L((s' ,a,t')). 

Let us consider all transitions from (s,a,t). The only possible transition is 
(s,a,t) — > t. Since (s,s') G -B, s —> t and B is a simulation relation it fol- 
lows that s' —> t' for some t' G S such that (i, t') G i?. By construction then also 
(s',a,t') t' and G B'. □ 

A.3 Proof of Theorem 3 

Consider states s and s' in a Kripke structure ( S, A, — >, L ). Assume that iiT |= 
sf>s' and that this is witnessed by the bisimulation relation B with (s, s') G £>. 
Thus i? is a simulation relation with (s, s') G B and with (s', s) G -B. We define 
the relation B' = Bl){(s, s') \ (s, s') G B}. It follows from the proof of Theorem 
1 that B' is a simulation relation for (s, s') and for (s', s). □ 

A. 4 Proof of Theorem 5 

Before we prove Theorem 5 in this section, we establish an intermediate result 
concerning the relation between paths — and their prefixes of a Kripke Struc- 
ture and the subset of bare runs, defined below — and their prefixes — in the 
LTS-embedding of the same Kripke Structure. 

Definition 20 (Bare run). A run p is said to be a bare run iff the labels 
occurring on the run differ from _L. The set of bare runs starting in a state s 7 

for s —> is given by the set RunSb(s). 

Let T = ( S, Act, ->•). Let Runs p (s) C S(Act S)* be the set of prefixes of runs 
starting in states s G 5; likewise, Runs^(s) C S((Act \ {±}) S)* is the set of 

prefixes of bare runs starting inseS satisfying s — h 

Given a (finite) trace a G Traces(Runs p (s)), we write s £ if there is some 
p p G Runs p (s) ending in state t such that a = Trace(p p ). 

Definition 21. Let a G Traces(Runs p (s)). Denote the sequence (3(cr), obtained 
from g by deleting 

— all subsequences of the form _L I; 

— _L in case o ends as such. 
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It is not hard to see that /3(a) E Traces(Runs p (s)) implies (3(a) E Traces(Runs^(s)), 
i.e., any trace (3(a) is generated by a bare run. 

Lemma 4. For all a E Traces(Runs p (s)), s E S such that s — > and all t E SUS, 
we have s t iff 

1. s t and W :a^ a'±, or 

2. s t and 3a' : a = a'±. 

Proof. By induction on the length of a. 

The above lemma firmly establishes a connection between a trace a of a run 
starting in a state s and the trace (3(a). Intuitively, as bare runs only pass 
through states that can perform a _L transition, any trace generated by a bare 
run can be "pumped up" to generate an arbitrary trace that can lead to the 
same state as its corresponding bare run, simply by following the loop _L I, for 
some action label I. 

Lemma 5. Let K — ( S, AP, — >•, L ) be a Kripke Structure. Then sq Si ••• E 
Paths(so) implies s lo s\ h ■ ■ ■ E Runsb(s ) in \ts(K) for precisely one infinite 
sequence lo h • • • • Vice versa, if for some infinite sequence lo l\ ■ ■ ■ , we have 
so lo si l\ ■ ■ ■ E Runsb(so) in lts(if) 7 then s s\ ■ ■ ■ E Paths(s ). 

Proof. Follows by definition of Its. 

Informally, the above lemma states that for each path in a Kripke Structure, 
there is a unique matching bare run in its LTS embedding, and, vice versa, 
for every bare run in its LTS embedding, there is a unique path in the Kripke 
Structure. 

We next establish that the embedding Its is such that for the trace equivalence 
of two states in a Labelled Transition System resulting from the embedding Its, 
it suffices to prove that the traces of all bare runs coincide. Formally, we have: 

Lemma 6. Let K = (S,AP,^,L) be a Kripke Structure. Let s,s' E S, with 
L(s) = L(s') be such that Traces(RunSb(s)) = Traces(RunSb(s')) * n Its(X). Then 
also Traces(Runs(s)) = Traces(Runs(s')) in Its(.fS'). 

Proof. By induction on the length of the traces. 

Since all runs are infinite, in the limit, any trace a E Traces(Runs(s)) is also in 
the set Traces(Runs(s')). 

Proof (Theorem 5). Let states s, s' E S in a Kripke Structure be trace equivalent. 
Suppose 7r = so si S2 . . . E Paths(s) and w' = s' Q s[ s' 2 ... £ Paths(s') are such 
that Trace(7r) = Trace(7r'). Because of Lemma 5, we find that there must be 
unique p E Runsb(s) and p 1 E Runsb(s') passing through the exact same states 
as the paths it and n' respectively. That is: 
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By construction of Its, we have li = t if L(s,) = i(si + i) and = L(s i+ i) 
otherwise (and similarly for I'A. But from the fact that Trace(7r) = Trace(7r'), 
we find that L(si) = L(s' i ) for all i. Hence, also k = l[ for all i. But this 
means that Trace(p) = Trace(p'). Appealing to Lemma 5, all bare runs corre- 
spond to paths in the Kripke Structure. Hence, we find that Traces(Runst,(s)) = 
Traces(Runs b (s')). Since L(s) = L(s'), Lemma 6 yields the desired conclusion 
that Traces(Runs(s)) = Traces(Runs(s')). 

For the other direction, we assume that states s,s' e S are trace equivalent 
in Its(if). In short, this means that the set of bare runs starting in s and s' 
produce the same traces. Let p = sq Iq s± l\ ... be a bare run starting in 
s, and p' = Sq 1' s[ l[ ... be a bare run starting in s', such that k = l\. 
Using Lemma 5, we find that there are unique matching paths 7r = so s i s 2 
and 7r' = s' Sj s' 2 .... By construction of Its, we find that this implies that 
L(si) = L(s' i ) for all i satisfying that i > j for the least j such that lj ^ r. For 
all < i < j, we observe that U = l\-\ = r, which can only be if L(s,) = L(sj_i) 
for < i < j. Likewise, i(s^) = L(s' i _ 1 ). Since all traces starting in s and s' 
are the same in Its(-fT), also Trace(s _L L(s) p) = Trace(s' _L L(s') p'), which can 
only be the case when L(s) = L(s'). But then also £(s,) = L(s' i ) for all % > 0. 
Hence, Trace(7r) = Trace(7r'). Since all paths starting in s and s' correspond to 
unique bare runs starting in s and s' in \ts(K), this means we have considered 
all possible paths and therefore all possible traces. 



B Proofs for Section 4 



B.l Proof of Proposition 2 

This theorem follows directly from the definitions. Consider arbitrary Kripke 
structure K = (S,AP,->,L). Let \ts(K) = T = (S',A',-t) and lts _1 (T) = 
K' = {S",AP',^',L'). We will show that S" = S, AP' = AP, -+'=^ and 
L 1 — L, thus establishing the isomorphism of K and K' . 
From the definition of Its (applied to K) it follows that 

- S' = SU{s\ s e S}; 

- A' = 2 AP U{±}; 

- A {(«, ±, 5), (*, L(s), s) | s, s' G S} U 

{(s, r, s') s,s'eSA L(s) = L(s') A s ->■ s'} U 
{(«, L(s'),s') | s, s' £ S A L(s) ^ L(s') A s -)• s'} 

and application of Its -1 (applied to T) gives 

- S" = {s' | s'eS'A «' = {s'|s'e5U{s|se5}A s' Since s' ^ 
iff «' e S we obtain S" = {s' \ s' e S} = S. 

- AP' = AP. 
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- = {(«', t') I (s', a, i') G^ Aa 7^ ± A s' 

= {(s', t') | 0', a, t') G^ Aa + _L A s' G S} 
= {(a', t') | a', f G 5 A L(s') = L(t') A s' -> <'} 
U {(«', i'j | a', t' G S A L(s') ^ L(f ) As'-> i'} 
= {(s',*') | s'.t 7 eSAs'^t'} 
=-> 

— L'(s') — a where a is such that s' — >• t' A for some t'. Therefore s'eS and 
i' = s'. From this it follows that a = L(s'). So L'(s') = L(s'). □ 



B.2 Proof of Lemma 1 

Consider a Kripke structure K — (S, AP,~^r,L) that is minimal w.r.t. strong 
bisimilarity (on KS). We have to show that \ts(K) is minimal w.r.t. strong bisim- 
ilarity (on LTS). We show that (1) the identity relation on the states of \ts(K) 
is a bisimulation relation, and (2) that this bisimulation relation is maximal. 

We know, since K is minimal, that the identity relation on S is a maximal 
bisimulation relation. From this it follows that the identity relation on S' (the 
states of Its(i-Q) is a bisimulation relation as well. 

Now assume that the identity relation on S' is not the maximal bisimulation 
relation, i.e., there exists a bisimulation relation B C S' x S' that relates at least 
one pair of different states. First, we show that it has to be the case that at least 
one pair of different states from 5 is related by B. 

This can be seen as follows. Consider a pair of different states s and t related 

by B. Suppose that s£S and t £ S. In this case, by definition of Its, s — but 

t i . Hence s and t cannot be related by a bisimulation relation. The case that 
s g S and t G S is similar. In case both s £ S and t £ S, by definition s — s' 
and t = V for some s',t' G S with s' ^ t' . Then, by definition of Its, the only 

transitions of s and t are s — - — \ s' and t — ^> t'. In order for s and t to be 
related by B necessarily s' and t' need to be related by B. Thus we can safely 
conclude that B relates a pair of different states s and t, both from S. 

Now we show that BD(SxS) is a bisimulation relation on KS, thus contradict- 
ing the assumption that the identity relation on S is the maximal bisimulation 
relation. 

Consider a pair of different states s and t, both from S, that are related by B. 
We show that L(s) = L(t). This follows from the following observations. Both s 

and t each have a single _L-transition: s — > s and t — > t. Then, also s and t are 

related by B. These states each have only one transition: s L - > s and i L * > t. 
From this it follows that L(s) = L(t). 

Assume that s — V s' for some s' G S. We distinguish two cases: 

- L(s) = L(s'). Then s A s' . Then t ^> t' for some t' such that (s',t') G B. 
Since B cannot relate states from S (such as s') with states outside S, also 
t' G S. Therefore, by definition of Its, t ->■ t'. 
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— L(s) ^ L(s'). Then s s' . Then t t' for some t' such that (s', t') E 
B. Since i? cannot relate states from S (such as s') with states outside 5, 
also t' E S. Then, by definition of Its it has to be the case that L(s') = L(t') 
and t -> 

In each case it follows that t -» t' and s' and i' are related by _B n (S x S)., 
which was to be shown. 

The case that t — > t' for some t' £ S needs to be mimicked is similar. 

From the contradiction obtained it can be concluded that the identity relation 
on S' is the maximal bisimulation relation. 

B.3 Proof of Lemma 2 

Consider a Kripke structure K — (S, AP, — L ) that is minimal w.r.t. stuttering 
equivalence (on KS). We have to show that \ts(K) is minimal w.r.t. divergence- 
sensitive branching bisimilarity (on LTS). We show that (1) the identity relation 
on the states of \ts(K) is a divergence-sensitive branching bisimulation relation, 
and (2) that this bisimulation relation is maximal. 

We know, since K is minimal, that K<± is minimal with respect to divergence- 
blind stuttering equivalence. Denote the states of Kd by S U {sd}- Hence, the 
identity relation on S U {sd} is a maximal divergence-blind stuttering bisim- 
ulation relation with respect to the Kripke structure Kd- From this it follows 
that the identity relation on S' (the states of \ts(K)) is a divergence-sensitive 
branching bisimulation relation as well. 

Now assume that the identity relation on 5" is not the maximal bisimulation 
relation, i.e., there exists a divergence-sensitive branching bisimulation relation 
B' such that there are different states s and t from S' with (s,t) 6 B' . We 
distinguish four cases: 

— s 6 S and t £ S. In this case, by definition of Its, s but and 
t ^> . Therefor the transition from s cannot be mimicked from t. So this case 
cannot occur. 

— s £ S and t S S. Similar to the previous case. 

— s € S and t E S. We have to show that there exists a divergence-blind 
stuttering bisimulation relation B" with (s,t) E B" . 

First we consider the case that s s' for some s' E S U {sd}- We can 
distinguish two cases 
• Suppose that s' E S. By definition s A s'. Then, by definition of 

divergence-sensitive branching bisimulation, we have a — t and (s',t) E 

B 1 , or the existence of ti and t 1 such that 

, T T . T T . (1.1 

t —>•••—> ti —>•••—> t n — > t 

with (s,ti) E B' (using the Stuttering Lemma) and (s\t') E B' . In the 
first case we have (s', t) E B' and in the second case we have 

t -> > U ->• > t n -> t' 

with (s,ti) E B' and (s',t') E B' . 
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• Suppose that s' = Sd- By definition there is an infinite sequence 

s —»•••—>■ Si — >■ • • • 

of states with the same label. Therefore, in Its(-ftT) there is an infinite 
sequence 

r r r 

S —>•••—> Si — > • • • 

where all states have the same label L(s) — L(si). Hence, there is an 
infinite sequence 

. r r . r 

t —>•••—> tj — > • • • . 

Therefore, in if, there is an infinite sequence 

t ->• •••->■ tj -> • • • 
where = L(tj) for all j. Thus t — > s,j as required. 

Lis') 

— s £ S and t (I S. By definition the only transition of s is of the form s > s' 

for some s' G 5*. Since t -/» obviously the only way to mimic the transition 

L(s') 

is by means of t -^4 t' for some i' £ S with i(t') = L(s'). Necessarily 
(s',t') G -B. We have established in the previous item that such s' and t' 
cannot be related. Therefore, also s and t cannot be related. 

Second, we show that L{s) — L(t). Since s G S we have s s L ^ s \ s. Then, 

fAt'4t' and t' A t** t" with (s,t*) G B\ (s,f) G B', {s,t**) G 5' 

and (s,i") G B' . It follows that L(t) = L(t*) and from the fact that t' = i it 
follows that £(f) = L(t) as well. Similarly, L(t**) = L(t'). Since t" = t** it also 
follows that L(s) = L(t") = L(t**). Thus we have obtained L(s) = L(t). 

We have shown that Kd was not minimal. Therefore the assumption that 
Its(if) is not minimal is flawed, which completes the proof. 
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